Analysis
Cyera has signed a letter of intent to acquire Oasis Security, an Israeli startup that secures non-human identities -- service accounts, API tokens, digital keys and increasingly, autonomous AI agents -- for approximately $1 billion. The structure is roughly $700 million in cash with the balance in Cyera equity. It's the second-largest cybersecurity deal of 2026, trailing only Accenture's roughly $3.2 billion majority-stake acquisition of industrial-security firm Dragos.
Oasis was founded in 2022 and had raised about $195 million from Accel, Craft Ventures and Cyberstarts. A $1 billion exit after three years and under $200 million raised is a strong multiple by any standard, and reports peg the founders' combined payday at north of $200 million -- a clean, fast outcome in a security market where most category winners take a decade to reach acquisition scale.
Cyera is the more interesting side of this deal. The company just closed $600 million at a $12 billion valuation and is now deploying that fresh capital into acquisitions rather than sitting on it -- a signal of confidence that data-security consolidation is happening now, not in some future cycle. Competitors in the identity and data-security space include Wiz (acquired by Google earlier this year), Varonis, and a cluster of smaller non-human-identity specialists like Astrix and Entro that Cyera didn't buy and now competes against directly.
“Oasis was founded in 2022 and had raised about $195 million from Accel, Craft Ventures and Cyberstarts.”
The strategic logic is the AI-agent boom itself: every enterprise now has a growing population of autonomous agents with their own credentials, permissions and blast radius, and almost none of the legacy identity-and-access tooling built for human logins was designed to govern machine identities at this scale. Folding Oasis's non-human-identity product into Cyera's data-security platform is a bet that "who can access what" and "what is this AI agent actually doing with that access" become the same buying decision for CISOs within the next two years.
For founders in adjacent categories, the read is that well-capitalized platform players are now the buyer of choice for point solutions in identity and agent security, and that a fast, clean exit in the $500 million to $1 billion range is realistic for a differentiated three-year-old company in this space -- a healthier signal than the drawn-out, down-round-adjacent outcomes common elsewhere in security this year.
What to watch: whether the deal closes at the LOI terms without renegotiation, how Cyera integrates Oasis's product without disrupting either company's existing enterprise contracts, and whether this triggers a wave of similar consolidation among the smaller non-human-identity vendors still standing.
